CWNP CWSP-208試験情報と無料練習テスト問題で合格せよ [Q44-Q65]

CWNP CWSP-208試験情報と無料練習テスト問題で合格せよ

2026年最新のの問題CWSP-208問題集で更新されたCWNP試験問題集を試そう

質問 # 44
Given: During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text.
From a security perspective, why is this significant?

A. The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.
B. The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
C. The username can be looked up in a dictionary file that lists common username/password combinations.
D. 4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.

正解：A

解説：
In Cisco LEAP (Lightweight EAP), the username is sent in clear text as part of the 802.1X authentication process. LEAP uses a challenge/response authentication mechanism that is susceptible to offline dictionary attacks because the attacker only needs to know the username and capture the challenge/response exchange to perform brute-force guessing of passwords. The username is used in generating the hash for the authentication exchange, making its disclosure critical for an attacker.
Incorrect:
A). PACs are used in EAP-FAST, not LEAP.
C). The 4-Way Handshake nonces are unrelated to the username.
D). While dictionary files may include username/password combos, the cryptographic significance in LEAP is due to the challenge/response mechanism.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Types and Authentication Attacks)
CWNP Whitepaper: LEAP Vulnerabilities

質問 # 45
Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.
As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication?
(Choose 2)

A. MS-CHAPv2 uses AES authentication, and is therefore secure.
B. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
C. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.
D. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
E. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
F. MS-CHAPv2 is subject to offline dictionary attacks.

正解：B、F

解説：
MS-CHAPv2 is a widely used authentication protocol, but it has notable weaknesses:
B). MS-CHAPv2 is vulnerable to offline dictionary attacks. Attackers can capture authentication exchanges and attempt password guesses offline due to predictable hashing behavior.
D). The only secure use of MS-CHAPv2 is inside a secure tunnel (e.g., EAP-TTLS or PEAP), where credentials are protected during transmission.
Incorrect:
A). MS-CHAPv2 is used in WPA2-Enterprise, not WPA-Personal, and it is allowed under WPA2-Enterprise via PEAP.
C). WEP does not enhance LEAP's security; it compounds vulnerabilities.
E and F. MS-CHAPv2 does not use AES for authentication. Using AES-CCMP for encryption does not fix MS-CHAPv2's weaknesses.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Methods and Authentication Protocols) CWNP MS-CHAPv2 and PEAP Implementation Guidelines Microsoft MS-CHAPv2 Vulnerability Advisories

質問 # 46
What software and hardware tools are used together to hijack a wireless station from the authorized wireless network onto an unauthorized wireless network? (Choose 2)

A. DHCP server software and access point software
B. A wireless workgroup bridge and a protocol analyzer
C. RF jamming device and a wireless radio card
D. MAC spoofing software and MAC DoS software
E. A low-gain patch antenna and terminal emulation software

正解：A、C

解説：
To hijack a wireless client, attackers often use:
An RF jamming device to disconnect the client from the legitimate AP (via deauth attacks or RF disruption) A rogue AP (created using access point software) that impersonates the real network DHCP server software to assign IP addresses and act as a gateway, completing the fake network Incorrect:
B). Terminal emulation is not relevant.
C). Workgroup bridges and protocol analyzers are for monitoring, not attacking.
E). MAC spoofing and DoS do not complete a hijack.
References:
CWSP-208 Study Guide, Chapter 5 (Hijacking Tools and Techniques)
CWNP Practical WLAN Attack Tools Guide

質問 # 47
As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods.
When writing the 802.11 security policy, what password-related items should be addressed?

A. EAP-TLS must be implemented in such scenarios.
B. MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.
C. Password complexity should be maximized so that weak WEP IV attacks are prevented.
D. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.
E. Certificates should always be recommended instead of passwords for 802.11 client authentication.

正解：D

解説：
In environments where PSK-based authentication (like WPA2-Personal) is still in use due to legacy device constraints:
C). Regularly changing static passwords helps limit exposure from credential leaks or previous employees retaining access.
Incorrect:
A). MSCHAPv2 is vulnerable to offline attacks; recommending strong passwords is good, but that alone isn't sufficient.
B). WEP is insecure regardless of password strength due to IV reuse.
D). Certificates are stronger, but not always feasible for legacy systems.
E). EAP-TLS is ideal but not always compatible with all devices; policies should be flexible to device capabilities.
References:
CWSP-208 Study Guide, Chapters 3 and 4 (WPA2-PSK and 802.1X Considerations) CWNP WLAN Security Lifecycle and Policy Development

質問 # 48
What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

A. The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.
B. The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.
C. The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.
D. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.

正解：D

解説：
The Pairwise Transient Key (PTK) is derived during the 4-Way Handshake and is used to generate:
The EAPOL-Key Confirmation Key (KCK)
The EAPOL-Key Encryption Key (KEK)
The Temporal Key (TK), which encrypts unicast traffic
Incorrect:
A). The Group Master Key (GMK) is used to derive the GTK, not the PTK.
C). PTK is not XOR'd with the PSK-PTK is derived from PMK + other session parameters.
D). PMK is never encrypted or transmitted; it is pre-shared or derived and remains local.
References:
CWSP-208 Study Guide, Chapter 3 (PTK and 4-Way Handshake)
IEEE 802.11i-2004 Specification

質問 # 49
Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.
What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

A. All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.
B. The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.
C. Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.
D. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops.
It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.
E. Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.

正解：D

解説：
Most integrated Wi-Fi adapters in Windows laptops are not capable of entering "monitor mode" or capturing
802.11ac frames properly. Compatibility with protocol analyzers like Wireshark or Omnipeek requires special drivers or specific USB adapters. Therefore, it is recommended to use a USB adapter known to support monitor mode and frame capture on 802.11ac for accurate and complete data capture.
Incorrect:
A). Not all adapters support protocol analyzer features.
C). MU-MIMO support is irrelevant for frame capture.
D). Other analyzers besides Wireshark can decode 802.11ac (e.g., Omnipeek).
E). Remote capture is not the only method-local USB adapters are effective too.
References:
CWSP-208 Study Guide, Chapter 7 (WLAN Analysis Tools)
CWNP Protocol Analyzer Guide
Vendor documentation: Riverbed, Omnipeek, Wireshark Adapter Support Lists

質問 # 50
Given: Your company has just completed installation of an IEEE 802.11 WLAN controller with 20 controller- based APs. The CSO has specified PEAPv0/EAP-MSCHAPv2 as the only authorized WLAN authentication mechanism. Since an LDAP-compliant user database was already in use, a RADIUS server was installed and is querying authentication requests to the LDAP server.
Where must the X.509 server certificate and private key be installed in this network?

A. Supplicant devices
B. Controller-based APs
C. RADIUS server
D. LDAP server
E. WLAN controller

正解：C

解説：
With PEAPv0/EAP-MSCHAPv2:
The TLS tunnel is created between the supplicant and the RADIUS server.
Therefore, the RADIUS server must have the X.509 server certificate and private key to authenticate itself and establish the tunnel.
Incorrect:
A). Supplicants verify the server's certificate, not hold it.
B). LDAP server is used for querying, not for EAP termination.
C). APs and
D). Controllers pass the authentication info but don't require certificates for PEAP termination.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Types and TLS Tunnel Establishment) CWNP EAP Deployment Guidelines

質問 # 51
Given: The Aircrack-ng WLAN software tool can capture and transmit modified 802.11 frames over the wireless network. It comes pre-installed on Kali Linux and some other Linux distributions.
What are three uses for such a tool? (Choose 3)

A. Probing the RADIUS server and authenticator to expose the RADIUS shared secret
B. Auditing the configuration and functionality of a WIPS by simulating common attack sequences
C. Transmitting a deauthentication frame to disconnect a user from the AP.
D. Cracking the authentication or encryption processes implemented poorly in some WLANs

正解：B、C、D

解説：
Aircrack-ng is a versatile toolset commonly used for WLAN penetration testing and security auditing. Its capabilities include:
A). Injecting deauth frames to simulate or test disconnection scenarios.
B). Testing WIPS responsiveness by simulating common attack frames.
D). Performing dictionary and brute-force attacks against weakly protected networks (e.g., WPA2-PSK with a weak passphrase).
Incorrect:
C). Aircrack-ng does not probe or test RADIUS shared secrets.
References:
CWSP-208 Study Guide, Chapter 7 (Tools and Wireless Attacks)
Aircrack-ng Documentation (https://www.aircrack-ng.org/)
CWNP Attack Simulation Labs

質問 # 52
Given: XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication. XYZ would like to support fast secure roaming for the phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming.
What portable solution would be recommended for XYZ to troubleshoot roaming problems?

A. WIPS sensor software installed on a laptop computer
B. Spectrum analyzer software installed on a laptop computer
C. An autonomous AP mounted on a mobile cart and configured to operate in monitor mode
D. Laptop-based protocol analyzer with multiple 802.11n adapters

正解：D

解説：
For troubleshooting fast roaming (e.g. 802.11r) across channels, a portable protocol analyzer with dual- or multi-band 802.11n adapters enables:
Simultaneous packet capture on different channels
Capturing handoff-related frames and timing analysis in roaming scenarios This setup allows detailed capture of reassociation, authentication, and 4-Way Handshake processes, essential for diagnosing roaming delays.
Other options (WIPS, spectrum analyzer, autonomous AP) do not support detailed 802.11 frame capture across multiple channels during roaming events.
References:
CWSP#207 Study Guide, Chapter 6 (Roaming Troubleshooting)

質問 # 53
After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify security threats?

A. Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.
B. WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.
C. Authorized PEAP usernames must be added to the WIPS server's user database.
D. Separate security profiles must be defined for network operation in different regulatory domains

正解：B

解説：
After deploying a WIPS, an essential baseline activity is to classify all detected devices in the RF environment. These classifications allow the system to enforce security policies and detect policy violations.
Classifications include:
Authorized (managed devices)
Rogue (unauthorized, possibly dangerous)
Neighbor (not part of your network but legitimate)
External or Ad hoc devices
Without this initial classification, WIPS cannot properly assess threats or trigger alarms.
References:
CWSP-208 Study Guide, Chapter 7 - WIPS Classification and Threat Management CWNP CWSP-208 Objectives: "Device Classification and Policy Enforcement"

質問 # 54
Which one of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

A. It is not a valid EAP type.
B. It does not support a RADIUS server.
C. It does not support mutual authentication.
D. It does not support the outer identity.

正解：C

解説：
EAP-MD5:
Only authenticates the client.
Does not provide mutual authentication, making it vulnerable to man-in-the-middle attacks.
It also does not protect the user's identity or credentials in a secure tunnel.
Incorrect:
A). The outer identity concept is not relevant to EAP-MD5 since it doesn't support tunneling.
B). EAP-MD5 is a valid EAP type, just insecure.
D). It can be used with a RADIUS server, but security is insufficient.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Method Comparison)
CWNP EAP Implementation Considerations

質問 # 55
What type of WLAN attack is prevented with the use of a per-MPDU TKIP sequence counter (TSC)?

A. Bit-flipping
B. Session hijacking
C. Forgery
D. Weak-IV
E. Replay

正解：E

解説：
TKIP (Temporal Key Integrity Protocol) was introduced with WPA to enhance WEP security. One of the security mechanisms used in TKIP is a per-MPDU (MAC Protocol Data Unit) sequence counter called the TSC (TKIP Sequence Counter). The TSC acts as a form of replay protection by assigning a unique sequence number to each transmitted frame. If a packet is received with a sequence number lower than or equal to a previously received number, it is discarded. This directly prevents replay attacks, where a malicious actor resends previously captured frames in an attempt to spoof the session or extract data.
References:
CWSP-208 Official Study Guide, Chapter 5 (WLAN Threats and Attacks)
CWNP Exam Objectives: WLAN Encryption and Key Management
IEEE 802.11i-2004 standard (Replay protection mechanisms in TKIP)

質問 # 56
Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)

A. Eavesdropping
B. Social engineering
C. DoS
D. Rogue APs

正解：A、B

解説：
Wireless Intrusion Prevention Systems (WIPS) are excellent for detecting on-air threats such as rogue APs, DoS attacks, spoofing, and misconfigured devices. However, WIPS cannot detect:
C). Eavesdropping - Passive listening on wireless transmissions cannot be detected because no signal is transmitted by the attacker.
D). Social engineering - Human-based attacks like phishing or pretexting fall outside the scope of wireless monitoring.
Incorrect:
A). Rogue APs can be detected via MAC address comparison, frame analysis, and signal triangulation.
B). DoS attacks, such as deauth floods or RF jamming, can be detected with appropriate WIPS sensors.
References:
CWSP-208 Study Guide, Chapter 5 (WLAN Threats and Attacks)
CWNP WIPS Implementation Guidelines
CWNP Whitepapers on Wireless Threat Detection Capabilities

質問 # 57
Given: One of the security risks introduced by WPA2-Personal is an attack conducted by an authorized network user who knows the passphrase. In order to decrypt other users' traffic, the attacker must obtain certain information from the 4-way handshake of the other users.
In addition to knowing the Pairwise Master Key (PMK) and the supplicant's address (SA), what other three inputs must be collected with a protocol analyzer to recreate encryption keys? (Choose 3)

A. GTKSA
B. Supplicant nonce
C. Authentication Server nonce
D. Authenticator address (BSSID)
E. Authenticator nonce

正解：B、D、E

解説：
To recreate the Pairwise Transient Key (PTK) during an offline attack on WPA2-Personal, the following components must be collected:
PMK (derived from the passphrase)
Supplicant MAC address (SA)
Authenticator MAC address (BSSID)
Supplicant Nonce (SNonce)
Authenticator Nonce (ANonce)
These values are used in the PTK derivation function:
PTK = PRF(PMK, "Pairwise key expansion", Min(AA, SPA) || Max(AA, SPA) || Min(ANonce, SNonce) || Max(ANonce, SNonce)) Incorrect:
D). GTKSA refers to the Group Temporal Key Security Association, unrelated to PTK derivation.
E). Authentication Server nonce is used in 802.1X-based Enterprise networks, not in WPA2-Personal.
References:
CWSP-208 Study Guide, Chapter 3 (WPA2-PSK Key Management)
IEEE 802.11i-2004 Standard
CWNP Learning Portal: WPA2 Handshake and PTK Derivation

質問 # 58
The IEEE 802.11 Pairwise Transient Key (PTK) is derived from what cryptographic element?

A. Phase Shift Key (PSK)
B. Group Temporal Key (GTK)
C. Pairwise Master Key (PMK)
D. PeerKey (PK)
E. Key Confirmation Key (KCK)
F. Group Master Key (GMK)

正解：C

解説：
The PTK (Pairwise Transient Key) is derived during the 4-Way Handshake using:
PMK (from PSK or EAP authentication)
ANonce and SNonce (nonces from authenticator and supplicant)
MAC addresses of client and AP
The PTK is then split into keys used for encryption and integrity protection.
Incorrect:
A). PSK can derive the PMK, but not the PTK directly.
B). GMK is used to derive the GTK, not PTK.
D). GTK is for group traffic encryption.
E & F. PK and KCK are components of PTK or alternate key usage-not used to derive PTK.
References:
CWSP-208 Study Guide, Chapter 3 (PTK Derivation and Usage)
IEEE 802.11i-2004 Key Hierarchy

質問 # 59
Given: The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources.
What single WLAN security feature should be implemented to comply with these requirements?

A. Mutual authentication
B. Group authentication
C. Role-based access control
D. Captive portal
E. RADIUS policy accounting

正解：C

解説：
Role-Based Access Control (RBAC) allows administrators to define user roles and enforce network access permissions based on the user's identity. By implementing RBAC in the WLAN, you can:
Grant the Marketing group access only to the file/email server and the Internet Prevent access to other internal resources This single feature enables fine-grained restriction without needing multiple SSIDs or ACLs.
Other options don't provide the necessary flexibility:
A). Mutual authentication ensures secure identity verification but doesn't control network access scope B & D & E do not provide targeted resource-level access control References:
CWSP#207 Study Guide, Chapter 6 (Access Control Policy and RBAC)

質問 # 60
Given: You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet.
What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations? (Choose the single best answer.)

A. Use internal antennas.
B. Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.
C. Power the APs using PoE.
D. User external antennas.

正解：B

解説：
Outdoor APs must be:
Protected from theft or tampering (physical security).
Shielded from weather/environmental conditions (IP-rated enclosures).
Mounted and secured to prevent unauthorized physical access or damage.
Incorrect:
A & B. Antenna type is relevant to RF coverage but does not address outdoor-specific security needs.
C). PoE is useful for power delivery but not a security solution.
References:
CWSP-208 Study Guide, Chapter 7 (Physical Security for Wireless Devices) CWNP Outdoor WLAN Deployment Guidelines

質問 # 61
Joe's new laptop is experiencing difficulty connecting to ABC Company's 802.11 WLAN using 802.1X/EAP PEAPv0. The company's wireless network administrator assured Joe that his laptop was authorized in the WIPS management console for connectivity to ABC's network before it was given to him. The WIPS termination policy includes alarms for rogue stations, roque APs, DoS attacks and unauthorized roaming.
What is a likely reason that Joe cannot connect to the network?

A. Joe configured his 802.11 radio card to transmit at 100 mW to increase his SNR. The WIPS is detecting this much output power as a DoS attack.
B. Joe disabled his laptop's integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.
C. Joe's integrated 802.11 radio is sending multiple Probe Request frames on each channel.
D. An ASLEAP attack has been detected on APs to which Joe's laptop was trying to associate. The WIPS responded by disabling the APs.

正解：B

解説：
WIPS systems often enforce policies based on MAC addresses and associated hardware fingerprints. If Joe uses a different wireless adapter than the one authorized, it may trigger a rogue device or unauthorized client alarm-even if it's the same laptop. This behavior is common in environments with strict WIPS enforcement policies.

質問 # 62
Given: You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames):
1) 802.11 Probe Request and 802.11 Probe Response
2) 802.11 Auth and another 802.11 Auth
2) 802.11 Assoc Req and 802.11 Assoc Rsp
4) EAPOL-Start
5) EAP Request and EAP Response
6) EAP Request and EAP Response
7) EAP Request and EAP Response
8) EAP Request and EAP Response
9) EAP Request and EAP Response
10) EAP Success
19) EAPOL-Key (4 frames in a row)
What are you seeing in the capture file? (Choose 4)

A. WPA2-Personal authentication
B. Active Scanning
C. WPA2-Enterprise authentication
D. Wi-Fi Protected Setup with PIN
E. 802.1X with Dynamic WEP
F. 802.11 Open System authentication
G. 4-Way Handshake

正解：B、C、F、G

解説：
A). WPA2-Enterprise authentication: The multiple EAP Request/Response exchanges followed by an EAP Success and a 4-Way Handshake (EAPOL-Key frames) indicate 802.1X authentication, characteristic of WPA2-Enterprise.
C). 802.11 Open System authentication: Two Auth frames (request and response) without encryption negotiation signify Open System Authentication - a default in RSN setups.
F). Active Scanning: Begins with Probe Request and Probe Response - part of an active scan process.
G). 4-Way Handshake: Identified by four sequential EAPOL-Key frames, completing the authentication process in WPA2.
References:
CWSP-208 Study Guide, Chapter 6 - Frame Analysis of Enterprise Authentication CWNP CWSP-208 Objectives: "EAP Authentication Flow" and "4-Way Handshake Analysis"

質問 # 63
When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used by the WNMS to issue configuration changes to APs?

A. IPSec/ESP
B. 802.1X/EAP
C. SNMPv3
D. PPTP
E. TFTP

正解：C

解説：
A Wireless Network Management System (WNMS) often uses SNMP to manage APs. SNMPv3 is the secure version of SNMP because it supports authentication, encryption, and message integrity. Unlike SNMPv1 and SNMPv2c, which transmit data (including community strings) in plaintext, SNMPv3 provides secure management communications.
References:
CWSP-208 Study Guide, Chapter 8 - Secure WLAN Management
CWNP CWSP-208 Objectives: "WLAN Management Security Protocols"

質問 # 64
You have an AP implemented that functions only using 802.11-2012 standard methods for the WLAN communications on the RF side and implementing multiple SSIDs and profiles on the management side configured as follows:
1. SSID: Guest - VLAN 90 - Security: Open with captive portal authentication - 2 current clients
2. SSID: ABCData - VLAN 10 - Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 5 current clients
3. SSID: ABCVoice - VLAN 60 - Security: WPA2-Personal - 2 current clients Two client STAs are connected to ABCData and can access a media server that requires authentication at the Application Layer and is used to stream multicast video streams to the clients.
What client stations possess the keys that are necessary to decrypt the multicast data packets carrying these videos?

A. All clients that are associated to the AP using any SSID
B. All clients that are associated to the AP with a shared GTK, which includes ABCData and ABCVoice.
C. All clients that are associated to the AP using the ABCData SSID
D. Only the members of the executive team that are part of the multicast group configured on the media server

正解：C

解説：
The GTK (Group Temporal Key) is used to encrypt multicast/broadcast traffic.
Each SSID has a unique GTK.
Only clients on the same SSID (ABCData) will receive and be able to decrypt multicast traffic encrypted with ABCData's GTK.
Incorrect:
A). Application-layer authentication does not affect GTK distribution.
C). Clients on other SSIDs (e.g., Guest, ABCVoice) have different GTKs and cannot decrypt ABCData's multicast traffic.
D). Each SSID uses a unique GTK; GTKs are not shared across SSIDs.
References:
CWSP-208 Study Guide, Chapter 3 (GTK Usage in Multicast)
IEEE 802.11i and CCMP Specifications

質問 # 65
......

CWNP CWSP-208 認定試験の出題範囲：

トピック	出題範囲
トピック 1	セキュリティライフサイクル管理：この試験セクションでは、ネットワークインフラストラクチャエンジニアが、新しいテクノロジーの特定から継続的な監視と監査に至るまで、セキュリティライフサイクル全体を監督する能力を評価します。新しいWLAN実装に関連するリスクを評価し、適切な保護を適用し、SIEMなどのツールを使用してコンプライアンスチェックを実行する能力が問われます。受験者は、効果的な変更管理、保守戦略、そして脆弱性を検出し、洞察に富んだセキュリティレポートを生成するための監査ツールの活用能力も実証する必要があります。評価には、ユーザーインタビューの実施、アクセス制御のレビュー、スキャンの実行、組織の目標に沿った調査結果の報告などのタスクが含まれます。
トピック 2	セキュリティポリシー：このセクションでは、ワイヤレスセキュリティアナリストのスキルを評価し、WLANセキュリティ要件がどのように定義され、組織のニーズと整合されているかを検証します。規制および技術ポリシーの評価、関係者の関与、インフラストラクチャおよびクライアントデバイスのレビューに重点が置かれます。また、高レベルのセキュリティポリシーがライフサイクル全体にわたってどの程度適切に作成、承認、維持されているか、関係者の継続的な意識向上とコンプライアンス確保のためのトレーニング活動も含め、評価されます。
トピック 3	WLAN セキュリティ設計とアーキテクチャ：この試験では、確立されたポリシーに沿って適切な WLAN セキュリティソリューションを選択し、導入する無線セキュリティアナリストの能力に重点が置かれます。WPA2、WPA3、802.1X EAP、ゲストアクセス戦略などの認証メカニズムの実装、AES や VPN などの適切な暗号化方式の選択などが含まれます。さらに、このセクションでは、無線監視システムに関する知識、AKM プロセスの理解、VLAN、ファイアウォール、ACL などの有線セキュリティシステムをセットアップして無線インフラストラクチャをサポートする能力も評価されます。受験者は、安全なクライアントオンボーディングの管理、NAC の設定、802.11r などのローミング技術の実装能力もテストされます。最後に、パブリックネットワークの保護、一般的な設定エラーの回避、脆弱なセキュリティプロトコルに関連するリスクの軽減に関する実践を評価します。
トピック 4	脆弱性、脅威、攻撃：この試験セクションでは、ネットワークインフラストラクチャエンジニアがWLANシステム内の脆弱性と脅威を特定し、軽減する能力を評価します。受験者は、CVEデータベースなどの信頼できる情報源を用いてリスクを評価し、修復策を適用し、隔離プロトコルを実装することが求められます。また、この分野では盗聴やフィッシングなどの攻撃の検知と対応にも重点を置いています。侵入テスト、ログ分析、SIEMシステムやWIPS WIDSなどの監視ツールの使用も含まれます。さらに、資産管理、リスク評価、損失計算などのリスク分析手順を網羅し、情報に基づいたリスク管理計画の策定をサポートします。